Hari Sekhon wrote: > how about just using sudo to grant the nagios user the suid equivalent > privilege since that's what it was designed for... > > that's what I do with my plugins that need root. >
Sometimes that's correct and sometimes it's not. In the case of check_icmp, it requires root privileges roughly 0.2ms of its execution, and drops those privileges before touching any user-input what so ever. sudo does a whole lot more, and doesn't drop its root privileges ever, so for this particular case it's safer to make check_icmp a setsuid binary. -- Andreas Ericsson [EMAIL PROTECTED] OP5 AB www.op5.se Tel: +46 8-230225 Fax: +46 8-230231 ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
